irontec / sngrep

Ncurses SIP Messages flow viewer
GNU General Public License v3.0
975 stars 189 forks source link

hide duplicate packets on VRRP #204

Open twocolors opened 6 years ago

twocolors commented 6 years ago

I would like to suggest a feature request. Can hide duplicate sip message when use VRRP between SS?

Select some time interval to hide duplicate sip message.

Kaian commented 6 years ago

While this could be handy for some scenarios, I don't like the idea of filtering to much at capture level. I prefer all capturing tools using libpcap produce the same packets when saving to a pcap (in fact captured packets keep untouched: for example, if they are captured fragmented they are stored fragmented).

I could add a simple call flow setting to hide retransmission messages (toggled by a keybinding) and start with a boolean value and in the future change it to a delta time (maybe in ms). That setting could be always enabled via config file like any other setting.

If any other libpcap tool does this (tcpdump, ngrep, and so on) I will try to take a look at the code :)

Regards!

twocolors commented 6 years ago

Thank you for the feature, i see this tool in Oracle (not Open source :( )